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1. X This is a FIRST submission of items concerning a filing under 35 U.S.C. 371. 

2. □ This is a SECOND or SUBSEQUENT submission of items concerning a filing under 35 U.S.C. 371. 

3. X This express request to begin national examination procedures (35 U.S.C. 371(f)) at any time rather than delay 

examination until the expiration of the apphcable time Hmit set in 35 U.S.C. 371(b) and PCT Articles 22 and 39(1). 

4. X A proper Demand for International Preliminary Examination was made by the month from the earliest claimed 

priority date. 

5. X A copy of the International Application as filed (35 U.S.C. 371(c)(2)) 

a. □ is transmitted herewith (required only if not transmitted by the International Bureau), 

b. X has been transmitted by the International Bureau. 

c. □ is not required, as the application was filed in the United States Receiving Office (RO/US). 
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9. X An oath or declaration of the inventor(s) (35 U.S.C. 371(c)(4)). 

10. D A translation of the annexes to the International Preliminary Examination Report under PCT Article 36 (35 U.S.C. 

371(c)(5)). 

Items 11, to 16. below concern document(s) or information included; 

Information Disclosure Statement under 37 CFR 1.97 and 1.98, 
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-Courtesy copy of the International Application as published with International Search Report. 
-Courtesy copy of the International Preliminiary Examination Report. 
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U S AlAl(^I(/j m'i^Hmx, «te"-^™.5) INTERNATIONAL APPLICATION NO. ATTORNEY'S DOCKET NUMBER 

U7/ 1 OjQf f PCT/EP99/06340 82032-00006 
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BASIC NATIONAL FEE ( 37 CFR 1.492 (a) (1) - (5): 

Neither international preHminary examination fee (37 CFR 1.482) nor 

international search fee (37 CFR L445(a)(2)) paid to USPTO and 

International Search Report not prepared by the EPO or JPO $1,000.00 

International preliminary examination fee (37 CFR 1.482) not paid to 

USPTO but International Search Report prepartd by the EPO or JPO $860.00 

International preliminary examination fee (37 CFR 1.482) not paid to 

USPTO but international search fee (37 CFR 1.445(a)(2)) paid to USPTO $710.00 

International prehminary examination fee paid to USPTO (37 CFR 

1.482) but all claims did not satisfy Provisions of PCT Article 33(l)-(4) $690.00 

International preliminary examination fee paid to USPTO (37 CFR 

1 4-R9\ Pinc\ all rlainm satisfied nrovisions of PCT Article 33(1V(4) $96.00 

ENTER APPROPRIATE BASIC FEE AMOUNT = 


CALCULATIONS PTO USE ONLY 


$860.00 




Surcharge of $130.00 for furnishing the oath or declaration later than D 20 X 30 
months from the earhest claimed priority date (37 CFR 1.492(e)). 


$ 




CLAIMS 


NUMBER FILED 


NUMBER EXTRA 


RATE 




Total claims 


10-20 = 




X $18.00 
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Independent claims 


1-3 = 




X $80.00 


$ 




MULTIPLE DEPENDENT CLAIM(S) (if applicable) 


-H$260.00 
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TOTAL OF ABOVE CALCULATIONS = 


$860.00 




Reduction of 1/2 for filing by small entity, if apphcable. A Small Entity Statement 
must also be filed (Note 37 CFR 1.9, 1.27, 1.28). 
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$860.00 




Processing fee of$130.00 for furnishing the English translation later than □ 20 □ 30 
months from the earliest claimed priority date (37 CFR L492(f)). + 






TOTAL NATIONAL FEE = 


$860.00 




Fee for recording the enclosed assignment (37 CFR 1.21(h)). The assignment must be 
accompanied by an appropriate cover sheet (37 CFR 3.28, 3.31). $40.00 per property + 


$ 40.00 
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a. X A check in the amount of $900.00 to cover the above fees is enclosed. 



b. n Please charge my Deposit Account No. in the amount of $ to cover the above fees. A 

duplicate copy of this sheet is enclosed. 

c. X The Commissioner is hereby authorized to charge any additional fees which may be required, or credit any 

overpayment to Deposit Account No. 50-1349, A duplicate copy of this sheet is enclosed. 



NOTE: Where an appropriate time limit under 37 CFR 1.494 or 1.495 has not been met, a petition to revive (37 CFR 
1.137(a) or (b)) must be filed and granted to restore the application to pending status. 

SEND ALL CORRESPONDENCE TO 

HOGAN & HARTSON LLP 
Celine Jimenez Crowson 
555-13^1^ Street, N.W., 300-W 
Washington, D.C. 20004 
(202) 637-5703 
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In re Application of: 
Andrew A. WAJS 
Serial No.: not yet assigned 
Filed: even date herewith 

Title: SECURITY SYSTEM 



371 of International Application 
IA#: PCT/EP99/06340 
lADate: 30 August 99 
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PRELIMINARY AMENDMENT 

Commisioner of Patents and Trademarks 
Washington, B.C. 

Sir: 

Prior to calculation of the filing fee and examination on the merits, 
please amend the above-identified application as follows. 
IN THE CLAIMS : 

Claim 5, line 1, delete "3 or 4/'. 

Claim 6, line 2, change "anyone of claims 1-5" to 

-claim 1". 

Claim 8, line 2, change "anyone of claims 1-5 or for a set of secure 
devices (11) according to claim 6 or 7" to -claim 1--. 

REMARKS 

The above amendments are being made to delete multiple 
dependencies in the claims and does not add to or depart from the original 
disclosure or constitute prohibited new matter. 

Respectfully submitted, 




CelTifeJrnFTi^^ C^ew^on" 
Attorney for Applicant 
Hogan & Hartson, LLP 
555 Street, N.W., Suite 300-W 
Washington, D.C. 20004 
PH: 202-637-5600 
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S ecur i ty syst<&ni 



The present invention relate© to a security system 
for preventing unauthorized use, entrance or the like, 
comprising a nunO^er of secure devices, each. o£ said secure 
devices contprising a chip with logic circuitry having a 
5 function in providing authorization" to the security system. 

Security systems of the above-mentioned type are 
used in many applications, such ae for example to prevent 
unauthorized access to secured rooms, in pay tv applica- 
tions, in banking systems etc. The security devices used are 

10 generally made as so-called smart cards comprising a chip.^, .> 
It will be clear that in view of the many smart cards 
provided to many different persons, security ey terns of this 
type are open to attack by pirates or def readers. Attacking 
a smart card currently involves a process ^ wherein during an 

15 analysis phase the chip of the stnart card is probed to find 
a means of attack. In this process of attacking the layout 
of the chip is analysed to identify the appropriate probe 
points to access the data contained in the chip. Thereafter 
the attack is planned in a preparation phase and finally the 

20 contents of the chip are extracted in the actual' attack 
phase. While the first and second steps typically take 
months, the third step can be performed in under a day. This 
means that once a smart card has been cracked for the first 
time, any second attack is relatively easy. It will be clear 

25 that this is a serious problem in security systems/ For, 
once a smart card has been identified as being broken and 
has been disabled by the controlling system, the pirate can 
crack another card in a repeated attack within a relatively 
short period and thereby continue with piracy or fraud. 

^0 Moreover, the smart cards used in prior art securi- 

ty systems are generally provided with a chip with the same 
basic silicon layout, even when used in diffe^enfe^ applica- 
tions. If for exansple a smart card of a specific type is 
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hacked for its banking information, the knowledge obtained 
by hacking this banking card can also be used to extract the 
secure information from the same type of card when it is 
used in a different application, for example in a pay 
television system. 

The invention aims to provide a security system of 
the above-mentioned type wherein the vulnerability for an 
attack by a pirate is significantly decreased and wherein 
the time required for a repeated attack of the secure device 
is substantially increased. 

To this end the invention provides a security 
system of the above-mentioned type, characterized in that in 
at least a part of said secure devices, the chip of a secure 
device is provided with a unique chip layout , 

In this manner a security system is obtained 
wherein at least a part but preferably all secure devices 
are provided with a chip with a random layout of the logic 
circuit3ry of the secure device. This means that the hardware 
implement ion of the secure functionality of the secure 
device varies from device to device. 

According to a preferred embodiment at least said 
logic circuitry of the chips of said part of the secure 
devices is implemented in FPGA technology, wherein the 
layout is programmed in the FPGA circuitry either in a 
volatile or non-volatile manner. 

The invention further provides a set of secure 
devices to be used in a security system of the invention, 
wherein each of said secure devices comprises a chip with 
logic circuitry having a function in providing authorization 
to the holder of a secure device , wherein in at -least a part 
of said secure devices, the chip of each secure device is 
provided with a unique chip layout. 

Finally, the invention provides a method for 
manufacturing a secure device for the the security system of 
the invention, wherein secure devices with a chip are used, 
said chips having logic circuitry having a function in 
providing authorization to the security system, wherein in 
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at least a part of said secure devices the chip of a secure 
device is provided with a unique chip layout. 

The invention will be further explained by referen- 
ce to the drawings, in which an embodiment of the system and 
method of the invention are schematically shown. 

Fig, 1 schematically shows a pay tv system compri- 
sing an embodiment of a security system of the invention. 

Fig. 2 schematically shows the internal structure 
of a smart card used as secure device in the system of fig, 
1. 

Fig. 3 shows a diagram of an embodiment of the 
method of the invention. 

Fig. 1 shows merely by way of example a broadcas- 
ting system wherein three broadcasters 1-3 are coupled with 
a multiplexer unit 4. The multiplexer unit 4 comprises means 
for scrambling, encoding and compressing broadcast signals 
provided by the broadcasters 1-3 and the thus obtained 
digital data streams are multiplexed into a digital trans- 
port stream. In the embodiment shown this digital transport 
stream is modulated by way of modulator 5 before transmissi- 
on. The operator of the equipment including the multiplexer 
unit 4 and modulator 5 is responsible for transmitting the 
signal to the receiving equipment of the public, one televi- 
sion set 6 being shown by way of example in fig. 1. One or 
more of the broadcasters 1-3 may be private broadcasters 
operating according to the concept of pay tv which implies 
subscription. This means that people wishing to view pro- 
grams broadcasted by a particular broadcaster, have to 
subscribe to such a broadcast and pay the appropriate fee. 

As schematically indicated the transmission of the 
signal may be carried out through one or more telecommunica- 
tion channels including a satellite link 1, terrestrial link 
8 or a cable system 9. 

Access to anyone of the broadcast signals provided 
by the broadcasters 1-3 requires a decoder 10 generally 
including a conditional access module not shown cooperating 
with a smart card 11 in a manner known per se . The smart 
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card 11 is one of the secure devices of a security system 
implemented in the broadcasting system shown in fig. i to 
prevent unauthorized access to pay tv signals by persons 
which did not subscribe to the broadcast. Each subscriber is 
5 provided with a smart card 11, each smart card 11 having a 
unique key and/or address. This security system may operate 
for example in a manner known per se using ECM's and EMM'S 
to provide access to the pay tv signals to authorized 
persons having a smart card ll with means for providing 

10 authorization to the security system. 

As explained above, such a security system is open 
to attack by pirates trying to copy an original smart card 
to thereby provide a large number of pirate smart cards. In 
order to substantially increase the time required for a 

15 repeated attack on a smart card, the security system descri- 
bed is provided with secure devices or smart cards 11, each 
of the smart cards comprising a chip with logic circuitry 
having a function in providing authorization to the system 
in a conventional manner. The logic circuitry may include 

20 the circuitry to store a unique key, and/or the algorithms 
and logic required to provide authorization, for example the 
algorithm to decrypt the key hierarchy used in a security 
system such as eurocrypt. 

Fig. 2 shows in a very schematic manner the inter- 
25 nal structure of a smart card ll showing that the chip of 
the smart card ll includes a central processing unit 12, an 
EEPROM circuit 13, a RAM circuit 14 a secure cell 15 and 
random bus and logic circuitry 16 . In the embodiment descri- 
bed the unique circuit layout is provided only in the secure 
30 cell 15, in which for example a cryptographic engine and a 
volatile storage element for storing a secret key are 
located. For a further explanation of this structure of a 
smart card reference is made to European Patent Application 
97202854.2 of the same applicant. 

According to a preferred embodiment the secure cell 
is implemented in FPGA technology (field programmable gate 
array) . The FPGA circuit of the secure cell 15 is program- 
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med in a usual maimer in accordance with the diagram of fig. 
3 to personalisse the amarfc card. In order to personalize a 
smart card ll, unique information is stored in the secure 
cellr thij9 unique information comprising a unique key, a key 
5 decryption algorithm used in the ©ecurity system or the 
like. Usually an PPGA 10 programmed as follows. First the 
unique information for personalisation is written in a high 
level language, for example C or VHDL. The high level 
language is first compiled. Thereafter the infoxmation is 
10 put through a eyntheeis tool which generates a logic imple- 
ttientation of the high level language code* This logic 
implementation would generally include logic circuitry such 
SLB AMD gates, OR gates, D latches etc, which are combined 
to produce the correct cryptographic functionality. Thereaf- 
15 ter the logic implementation is put through a routing 
program which constructs the actual program file for a 
particular FPCSA. This file will specify which cells are 
interconnected within the FPOft. and how each cell ie program- 
med. The actual prograia file is then loaded into the FPGA 
20 circuit on power up or fuse blown into the FPC5A depending on 
the particular FPOA. technology used. 

Generally a synthesis tool can produce many varia- 
tions of the same functionality. In prior art applications 
the synthesis tool is designed to produce logic which 
25 utilizes the minimum number of gates, shows an optimal power 
efficiency, has the best speed performance or a comproffixse 
of the above, 

According to the present inveantion a variation 
factory for example a random number, is introduced into the 
30 synthesx^ tool such that the layout provided by the synthe- 
sis tool will vary from chip to chip. As schematically shown 
in the diagram of fig. 3, a variation f actor 1^ such as a 
random number is fed into the synthesis too^^d this 
results in the tool generating a set of logic which is 
35 unique to that variation factor, A new variation factor i^ 
used for personalising each of the smart cards il of the 
security system* In this manner it is obtained that each 
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smart card 11 of the security eyscem has a unique layout of 
the logic circuitry of the secure cell 15. 

Similarly a variation factor^can be fed into the 
layout tool resulting in a further randomizing of the layout 
of the logic circuitry. 

Further it is possible to introduce a variation 
factor Un the ^otnpilation step, bo that the input to the 
synthesis tool will receive a varying input. All possible 
variations can be used either separately or in combination. 

Using the method of the invention the p&rsonaliza~ 
tion step introducing a unique key. the logic implementation 
of the key and/or the decryption functions into the smart 
card 11, will result in a layout of the logic circuitry 
which is unique to each smart card li. in this maxmer it is 
15 obtained that the time needed for each attack of a security 
syatem is substantially increased as the pirate can not use 
the information obtained in an analysis phase and a prepara- 
tion phase in an attack of a first smart card, in attacking 
another sraart card. 

^ ^ alternative, instead of using fpga technology 
in the secure cell only, more parts of the chip or the 
entire chip of the smart card can be built using PPC3A 
techniques and can then be randomized in the above desisribed 
manner . 

^ preferred embodiment a volatile Fpoa is used, 
wherein the FPGA program is stored in RJkM 14 of the smart ' 
card 11, which is powered by a battery just as the volatile 
storage of the key in the secure cell 15, Including defense 
traps as known per se in the smart card chip will result in 

30 a loss of the contents of the RAM memory and the volatile 
storage of the secure cell IS if a pirate fails to overcome 
thew defense strategy of the chip. Thereby the programming 
of the FPGA circuitry will be lossed. In this manner it is 
obtained that by attacking a card no information is gathered 

35 on how to attack a next card. 

Although the invention is explained in the above by 
reference to a pay tv system, the security system of the 



xnvention can be used in any security eystem uaing secure 
devices for providing authority to the holder of the secure 
device, such as security systems used to protect rooms, 
buildings, or the like against unauthorized entrance, 
5 banking cards etc. Further, although it is preferred' to 
provide each smart card Wth a unique layout it ie also 
possible to provide groups of cards with a unique layout. 

The invention is therefore not reetricted to the 
above described embodiment which can be varied in a number 
10 of ways within the scope of the claims. 
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1. Security system for preventing unauthorized 
use, entrance or the like, cottrprieing a number of secure 
devices, each of said secure devicea^'Wiaing a chip with 
logic Circuitry iiaving a fuiiction in providing authorization 

^ security system, characterized in that in at least ^ 

of said secure devices V'^the chip of a secure device'^'-ks 
provided with a unique chip layout. 

2, security system according to claim 1, wherein 
at least said logic circuitry^^cJf the chips of said part of 

10 the secure devices xs implemented in FPGJl technology, 
wherein the layout ie programmed in the FPOA circuitry 
either in a volatile or non -volatile manner. 

3, Security system according to claim 2, wherein 
the logic circuitry of each secure device chip is provided 

15 in a secure cell of the chip. 

4. security system according to claim 1, wherein 
the coiqplete secure device chip is implemented in FPESk 
technology, wherein the layout is programmed in the chip 
either in a volatile, or non -volatile manner. 

^° 5- Security system according to claim 2, 3 or 4 

wherein the logic circuitry or the entire chip is made as 'a 
volatile programmable PPGA, wherein the FPGA program is 
stored in a battery powered RAM. 

6. A set of secure devices - to ba uocd hi a aecuri- 
25 ty system according to anyone of claims 1-5, wherein each of 

said secure devices^ Comprises a chip with logic circuitry 
having a function in providing authorization to the holder 
of a secure device^ wherein in at least -^^^ of said 
secure devices the chip of each secure device is provided 
30 With a unique chip layout. 

7. A set according to claim e, wherein at least 
said l^ic circuitry of the chips of said part of the secure 
devxce^ ^is implemented in PPGA technology, wherein the 
layout ie pxogramtned in the FPGA circuitry either in a 



volatile or non-volatile manner. 

security .LT''''^ --nufacturing a secure ^..iJ^Lr a 
securxty System according to anyone of claims i-s ox for a 

the «ouraty eyst™, *«eia to at l„Bt of said 



" • "^"""^ *°««=din9 tc claim a, „h«rein chips with 

logxc cxrcuxtxy i„ rp.^ technology „e u=e, sala ».th^ 

the Icwic ourouitiy by maans of synthesis tool"gJ,fl , ■, 
15 devicas?5a variation factor is introd!=J ^ """"^ 

the synths^is tooi-a^. the i:;::t:^?th: rvL':: r 

unique circuit layout. providing a 

sv„th.»' ''t' 1^^^ «<=="«^i»3 to claim 9, whsrain tha 

v^^^v, 1 -I ^ ci^tSy compilation step of tHe 
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Declaration and Power of Attorney for Patent Application 
As a below named inventor, I hereby declare that: 

My residence, post office address and citizenship are as stated below next to my name, 

I believe I am the original, first and sole inventor (if only one name is listed below) or 
an original, first and joint inventor (if plural names are listed below) of the subject 
matter which is claimed and for which a patent is sought, on the invention entitled 
SECURITY SYSTEM, the specification of which is attached hereto as Attorney Docket 
No. 82032-00006. < 

I hereby state that I have reviewed and understand the contents of the 
above-identified specification, including the claims, as amended by any amendment 
^referred to above. 

lacknowledge the duty to disclose information which is material to patentability in 
accordance with Title 37, Code of Federal Regulations, § 1.56(a). 

Mereby claim foreign priority benefits under Title 35, United States Code, § 119 of 
IBty foreign application(s) for patent or inventor's certificate listed below and have 
also identified below any foreign application for patent or inventor's certificate 
Ijaving a filing date before that of the apj>li cation on which priority is claimed: 

Ef ior Foreign Application(s) 

ry Priority Claimed 

^B202915.9^ EP Ol/September/1998 ^ [X] [] 

IJumber) (Country) (Day/Month/Year) Yes No 

I hereby claim the benefit under Title 35, United States Code § 119(e) of any United 
States provisional application(s) listed below. 



(Application Serial No.) (Filing Date) 

I hereby claim the benefit under Title 35, United States Code, § 120 of any United 
States application(s) listed below and, insofar as the subject matter of each of the 
claims of this application is not disclosed in the prior United States application in the 

1 
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manner provided by the first paragraph of Title 35, United States Code, § 112, 1 
acknowledge the duty to disclose material information as defined in Title 37, Code of 
Federal Regulations, l,56(a) which occurred between the filing date of the prior 
application and the national or PCT international filing date of this application: 

PCT/EP99/06340 ^ 30/August/1999 ^ 




(Application Serial No.) (Filing Date) (Status) 

I or we hereby appoint the following attorneys to prosecute this application and to 
transact all business in the Patent and Trademark Office connected therewith, and 
request that all correspondence about the application be addressed to jlOGAN^ 
HARTSmiLX.P., 555 13th Street. Washington^ D.C, 20004, ^ illi^g^rNo^ 

Celine Jimenez Crowson, Reg. No. 40^M 1. 
^ Kevin G. Shaw>^eg. No. 43.110 . 

J hereby declare that all statements made herein of my own knowledge are true and 
th^t all statements made on information and belief are believed to be true; and 
^fiSrther that these statements were made with the knowledge that willful false 
^^tements and the like so made are punishable by fine or imprisonment, or both, 
under Section 1001 of Title 18 of the United States Code, and that such willful false 
!#ktements may jeopardize the validity of the application or any patent issuing 
tISereon. 



FIRST NAMED INVENTOR SIGNATUBIE 
^ir )4»d3£ajaLAPgUStiix e WAJS 





lESIDENCE CITIZENSHIP 
lR-2023 AA Jlaarlpm 6rSvA • Great Britain 



POST OFFICE ADDRESS 

Schotersingel 93, NL-2023 AA Haarlem, The Netherlands 
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